ai-data-visualizer
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The generated HTML dashboard references the Chart.js library hosted on the jsdelivr CDN. This is a common and safe practice for including web dependencies from well-known service providers.\n- [REMOTE_CODE_EXECUTION]: The skill uses a Python script to generate an HTML file containing JavaScript. This script is used to visualize the user's data interactively within the browser. This is the intended primary functionality of the tool.\n- [PROMPT_INJECTION]: The skill processes external data provided in CSV or JSON format, which constitutes a potential surface for indirect prompt injection.\n
- Ingestion points: Data is loaded from local files or standard input using the
generate_dashboard.pyscript.\n - Boundary markers: The instructions do not define specific delimiters to separate user-provided data from agent commands.\n
- Capability inventory: The skill has the capability to read local files and write generated HTML content to the filesystem.\n
- Sanitization: The script employs standard JSON serialization when embedding data into the HTML template to prevent basic structural breakage.
Audit Metadata